Reading

US aerospace startup Poseidon Aerospace announced it has closed a $60 million Series A financing round led by TQ Ventures. The funds are dedicated to supporting the development of Egret, an autonomous cargo aircraft currently under construction by the company.

Egret is a uniquely designed unmanned freighter featuring a 50-foot wingspan and a payload capacity of up to 4,000 pounds. Unlike conventional cargo planes adapted from passenger or piloted designs, Egret was conceived without a cockpit, dedicating all internal space to cargo rather than flight controls and pilot accommodations. This design choice aims to reduce weight and maximize freight volume.

The project is led by David Zagaynov, a former Amazon engineer specializing in logistics, and Parker Tenney, a mechanical engineer previously at Lockheed Martin. Zagaynov describes the concept as "the autonomous trucks of the sky," intended to move shipments between locations as cheaply as possible. Although there is no human pilot onboard, initial testing involves remote operators managing flight via live camera feeds and ground control stations.

Key performance metrics such as range, cruising speed, fuel consumption, and operating costs have not been disclosed, meaning actual freight efficiency remains unknown pending upcoming test flights in Oregon. This financing highlights continued investor interest in large-scale autonomous aviation logistics, though commercial viability depends on future technical validation and regulatory approvals.

Australian tech media outlet iTnews reported that the recently patched high-risk vulnerability in Node.js, known as Node2Shell (CVE-2026-111497), actually stems from Google's Brotli compression library. While Node.js is affected because it embeds this component, Paul McCarty, co-founder and CTO of security firm OpenSourceMalware, discovered that libraries and applications in Python, Go, .NET, and Perl ecosystems also use Brotli, as do browsers, desktop applications, and infrastructure software. This indicates the vulnerability's impact extends far beyond Node.js itself.

McCarty noted that the Python packages Brotli and brotlicffi have been confirmed to use the affected decoder, with patched versions released on October 22 and 23, respectively. Products like Chrome, Firefox, and Envoy have also addressed related issues. However, since some products embed the Brotli library directly, enterprises may still have other software using unpatched versions even after updating Node.js or OS packages. Whether a system is affected depends on the specific version of Brotli used and whether it decompresses untrusted data.

The vulnerability lies in the decoder responsible for decompressing data in Brotli. If an attacker can trick an application using an affected version into decompressing specially crafted data, it could trigger an out-of-bounds write, leading to memory corruption or even remote code execution. The CVSS 4.0 risk score is 9.2. Security firm Miggo traced the vulnerability history and found that the problematic code was added to Brotli on February 26, 2018. Although the upstream project corrected the relevant code on February 27, 2026, it was not identified as a security vulnerability at the time, and the official release containing the fix was only published on October 21. This time gap demonstrates that fixing upstream code does not mean dependent software has automatically received the patch.

Node.js released security updates on October 21 to patch the out-of-bounds write vulnerability in the Brotli decoder, with updated versions including 22.23.4, 24.22.1, and 26.12.1. The Taiwan Computer Emergency Response Team / Coordination Center (TWCERT/CC) also issued a security advisory, reminding enterprises to audit backend services, container images, web frontend toolchains, and Node.js versions used by some AI agent command-line tools, and to complete updates promptly. For other software embedding the Brotli library, enterprises should confirm whether they use affected versions and apply patches according to product security advisories.

Arsalan Tavakoli-Shiraji is the co-founder and Senior Vice President of Field Engineering at Databricks. Databricks is currently valued at $190 billion, with more than 70% of Fortune 500 companies as customers. However, in his speech at TechCrunch Disrupt, his core argument was not about how powerful the technology is, but rather that technological superiority alone is not enough.

He recalled an early experience: after finally securing a meeting with a potential client, he discovered that the person had just signed a major deal with his primary competitor.

Tavakoli-Shiraji categorized the core concerns of enterprise clients regarding AI into four categories, which he calls the "four Cs."

The first is Context: Can AI be trained like a new employee to learn the company's terminology, processes, and priorities? The second is Choice: Can enterprises freely switch AI models rather than being locked into a single vendor? The third is Cost: Is the operating cost of AI products controllable? The fourth is Control: Are there sufficient safety guardrails to constrain AI behavior and protect sensitive information?

Regarding the actual level of enterprise AI adoption, Tavakoli-Shiraji offered a candid assessment. He jokingly asked CIOs on a scale of one to five where their company stands: a one means employees merely have access to ChatGPT, while a five means the company has already transformed its business processes using AI.

He believes the biggest opportunity today is not for enterprises to create flashier AI demonstrations, but to modernize those expensive legacy systems.

In terms of distribution strategy, Tavakoli-Shiraji shared a key turning point in Databricks' early days: they initially tried to secure a meeting with the Swiss bank UBS directly but failed. Later, they established a partnership with Microsoft, becoming an Azure cloud partner, which meant sales agreements were covered under Microsoft's terms. More importantly, Microsoft's sales team proactively booked meetings and advocated for Databricks.

Tavakoli-Shiraji also recalled that early deals often fizzled not because the technology was inadequate, but because startups were unprepared to address legal, contractual, or security issues.

These insights stem from Tavakoli-Shiraji's personal enterprise sales experience. He frankly estimates that 99% of the enterprises he has spoken with remain at level one or two, noting that "it will take many, many years before people can actually properly deploy AI in a very meaningful way in the enterprise."

The framework of the four Cs is itself testable: any team selling AI products to enterprises can use these four dimensions to benchmark their sales materials and identify exactly which 'C' causes customer rejection. Tavakoli-Shiraji was responsible for helping secure Databricks' first major clients in its early stages, and this classification method derives from his practical enterprise sales experience.

Anthropic disclosed a set of easily overlooked figures in its S-1 filing: during the three months ended September 30, 2026, over 80% of its revenue was generated from model versions released within the previous six months. This implies that Anthropic’s current revenue is heavily dependent on its most recent models, while the development costs for these latest models are entirely expensed as research and development (R&D) and do not enter the cost of goods sold (COGS).

The logic for traditional software companies differs. A company develops a product once and can benefit from the same codebase for subsequent years; R&D is a one-time investment, while COGS primarily consists of hosting, support, and minor maintenance. Consequently, gross margin can truly reflect the economics of unit delivery. In Anthropic’s case, models have a shelf life; today’s revenue requires tomorrow’s R&D to sustain it. Here, R&D is not an investment in the future but a necessary expense to maintain current revenue.

OnlyCFO performed a sensitivity calculation: if 50% of R&D expenses were allocated to COGS, Anthropic’s gross margin for the first half of 2026 would be approximately 55.5%. While still respectable, the gap between this figure and the reported number is sufficient to demonstrate that the two metrics are not calculated on the same basis. The author also notes that if Anthropic achieves recursive model training in the future—requiring less R&D to produce new models—this issue might diminish, but this remains an unfulfilled condition.

Practical implication for readers: When comparing Anthropic’s gross margin with that of listed software companies, one cannot rely solely on reported numbers. An AI model company reporting an 80% gross margin may have a true unit economic closer to 55%–60%, whereas a traditional SaaS company reporting a 75% gross margin may be closer to its actual delivery costs. This does not imply that Anthropic’s business is poor—its positive free cash flow ($3.4 billion in the first half), 900% net revenue retention, and $6.6 million revenue per employee remain outstanding—but rather that the meaning of the gross margin metric differs between these two types of companies.

The S-1 also exposes another structural risk: Anthropic disclosed that 5%–7% of its year-to-date revenue comes from companies violating its usage policies. Using a midpoint of 6%, this equates to approximately $4 billion in annualized revenue coming from current or potential competitors using Anthropic’s models for distillation. This revenue stream itself helps fund future competitors.

In June 2026, when AlixPartners took control of Shimao Group’s 1,219-room hotel complex in Tung Chung, Hong Kong, it faced not just a building to be sold, but an active hospitality business. Una Ge, a managing director at AlixPartners serving as joint receiver, told the South China Morning Post that the mandate was to protect this live hotel operation from liabilities linked to Shimao’s broader debt while managing a transaction involving more than 1,000 contracts. Ultimately, the asset package, comprising the Sheraton Hong Kong Tung Chung Hotel and the Four Points by Sheraton, was sold to Oceanfront Hong Kong, controlled by Malaysia’s ParkCity Group, for HK$2.7 billion (approximately US$344 million). This represents a 40% discount against the HK$4.5 billion syndicated loan facility.

However, Ge emphasized that the core of the deal was not 'selling buildings to pay down debt.' The receiver team coordinated with Marriott International to ensure uninterrupted hotel operations even before formal court orders were issued.

Hotels are operating businesses, not passive real estate assets.

Maintaining 'business as usual' is critical for prospective buyers and for lenders deciding whether to support the sale.

Specific operational steps included working with Eversheds Sutherland and Marriott’s regional M&A team to draft two interconditional agreements separating physical assets from operating entities, allowing the Malaysian buyer to assume control without inheriting Shimao’s wider corporate debt; novating more than 1,000 commercial agreements and securing consents under Marriott’s long-term management contract; and directly managing the adjacent T Bay shopping mall by renewing retail leases, upgrading signage, and launching guest-discount programs. Ge stated that monthly hotel revenue posted year-on-year gains throughout the entire sale process.

The return on these efforts was evident during the bidding phase. The tender attracted formal interest from buyers across nine markets, including mainland China, Singapore, Malaysia, Japan, Australia, Europe, the Middle East, and the United States. Following the initial tender, the receivers asked shortlisted parties to revise their terms, and all submitted higher offers. Ge said that decisions in such processes are not based solely on price; execution certainty, financing commitments, and board approvals also carry significant weight.

From a broader perspective, Shimao initially sought between HK$6 billion and HK$6.5 billion for the two hotels in 2023, lowering its expectations to HK$4.5 billion late last year, before finally settling at HK$2.7 billion. This discount magnitude reflects the steep concessions banks are making to reduce balance-sheet pressure and limit provisioning. The gap between Shimao’s initial seek of HK$6 billion and the final HK$2.7 billion also illustrates that even with operational preservation, asset prices remain constrained by overall liquidity in a frozen market.

As a restructuring veteran with 18 years of experience, Ge pointed out that while the legal tools available to advisers remain broadly unchanged, the scale of Chinese developer defaults has expanded the network of offshore stakeholders beyond anything seen in previous cycles. Shimao demonstrated cooperation during the receivership—proactively providing information and agreeing to confirm in Hong Kong Stock Exchange disclosures that the hotels would continue normal operations—which is uncommon in offshore receiverships. Ge noted that most borrowers resist creditor enforcement.

A button disappears under an iPhone viewport. Static code review would not catch this issue—the code logic is correct, the developer’s intent is met, but the rendering result is wrong. Daksh Gupta, co-founder and CEO of Greptile, believes this marks the boundary of AI code review: reading code can check logic, but some defects must be exposed by actually running the application.

Greptile is a company that builds AI agents for code review and testing. Gupta says validating a pull request involves multiple layers: whether the code logic is correct, whether it implements the developer’s intent, whether there are security vulnerabilities, and whether it breaks existing functionality. Some of this validation can only be done by running the application.

GPT-6 Astra’s computer use capability gives Greptile a new path. The specific approach is: start a development server for a pull request, resize the browser to an iPhone-sized viewport, and then simulate a user moving through the application. The model’s visual understanding allows it to inspect screen content and spot hidden buttons.

"A QA firm testing all your changes is just impractically slow considering how fast we’re able to ship code with these models," Gupta says. His judgment is that computer use capability has reached a level where it can automate the process of "a user experiencing your application and trying to break it," thereby giving large companies more confidence in shipping.

Greptile also provides codebase documentation to Codex via a Model Context Protocol server. Gupta states that providing context reduces the fallback rate of AI-generated code, saving customers time and inference costs. However, this metric is based on internal tracking, with no public methodology or third-party verification.

Overall, Gupta’s core argument is a shift in capability boundaries: when AI models’ visual understanding and interaction simulation capabilities are strong enough, the object of defect detection expands from code text to application behavior. This judgment comes from Greptile’s actual usage experience, and independent benchmark tests verifying its coverage and false positive rates have not yet been conducted.

The Canadian 10-year minus 3-month government bond term spread remained positive through September 2026. However, a term spread-recession probability model estimated on pre-pandemic data would have predicted a recession in 2024 using a 40% threshold—yet Canada did not experience a recession. The resolution to this paradox depends on three levels.

First, there is divergence in recession identification criteria—the CD Howe Institute, ECRI, and Philip Cross have identified different dates for recessions in Canada.

Second, the choice of model specification determines the conclusion: a debt service augmented regression would have predicted a recession at the 40% threshold, whereas a term premium augmented specification would not, although the latter is based on a shorter sample.

Finally, the historical evidence itself points in the opposite direction: since 1970, the term spread has never been so positive and then subsequently followed by a recession. Therefore, indicator-based evidence does not strongly suggest an imminent recession risk—but a 12-month forward-looking indicator also cannot anticipate surprises such as a sharp escalation in trade wars.

New York-based AI startup Nevis has announced a $70 million Series B funding round led by EQT Ventures. According to Fortune, citing a person familiar with the matter, the round values the company at $500 million. Founded in October 2024 by former Revolut executives Mark Swan, Philipp Burda, and Ivan Chalov, Nevis develops AI software designed to automate administrative tasks for financial advisors.

New investors QuantumLight and Charles Schwab Corp. joined the round alongside existing backers Sequoia Capital, Iconiq, and Ribbit Capital. Carolina Brochado, a partner at EQT Ventures, will join Nevis's board. The latest raise brings Nevis's total funding to $110 million over two years.

The company targets a structural labor gap in the US wealth management industry. McKinsey estimated in 2025 that more than a third of US financial advisors would retire over the next decade, creating a shortfall of roughly 100,000 advisors by 2034. This coincides with a massive generational wealth transfer, as baby boomers are expected to pass nearly $100 trillion to heirs and charities through 2048.

Nevis CEO Mark Swan stated that traditional advisors can spend up to 80% of their day on administrative work, juggling eight to 10 separate software systems. The company's AI agents aim to handle these manual tasks, allowing advisors to focus on client service. Nevis reports that assets managed by advisory firms using its platform grew from $50 billion to $700 billion over the past year, adding approximately $75 billion monthly. The startup currently serves around 20 customers, including Focus Financial Partners and United Capital.

Food delivery company DoorDash is in advanced talks to acquire grocery delivery platform Instacart in a deal that could value the latter at approximately US$17 billion, according to a source familiar with the matter speaking to Reuters on Monday. The agreement may be finalized as soon as Wednesday, though there are no guarantees it will come together. The same source confirmed that Instacart’s previous acquisition discussions with ride-hailing giant Uber are no longer active.

Shares of Instacart rose about 8% in regular trading following the news, while DoorDash fell around 6%. As of Friday’s close, Instacart had a market value of about US$13 billion. The Wall Street Journal first reported the developments.

The potential deal comes as the food delivery industry grapples with rising labor costs, tighter regulation of delivery workers, and fading pandemic-driven demand. Companies like DoorDash and Uber have been expanding into grocery and retail to drive growth beyond restaurant delivery. If successful, the acquisition would give DoorDash access to Instacart’s established marketplace and retailer ties, which it could combine with its own vast delivery network and customer base.

Separately, Instacart said in a regulatory filing on Monday that it would wind down its Caper Cart smart shopping-cart business by the end of the second quarter of 2027, expecting pre-tax charges of US$55 million to US$80 million related to the move.

People are accustomed to blaming AI chaos on vendors' unrestrained data scraping, but Diginomica editor Chris Middleton believes there is also a "Wild West" on the user side: lawyers, consulting firms, publishers, and news organizations angrily condemn vendors while simultaneously embedding AI into their professional workflows without verification.

Middleton cites a large-scale audit published in The Lancet in July 2026 to quantify the severity of the problem. The Lancet conducted a reference integrity check on 2.5 million biomedical papers and found that 4,046 fabricated references were contained within 2,810 papers. More critically, the rate of degradation has accelerated: in 2023, approximately one in every 2,828 papers contained at least one fabricated reference; by 2025, this had risen to one in 458; and in the first seven weeks of 2026, it reached one in 277. The fabrication rate increased from approximately four per 10,000 papers in 2023 to 51.3 per 10,000 papers in the fourth quarter of 2025, reaching 56.9 per 10,000 papers in early 2026—an increase of more than 12 times over three years.

The Lancet explains in its paper that fabricated references may stem from paper mills, intentional misconduct, or the uncritical use of AI writing tools. Large language models generate references that sound plausible but do not actually exist; this is a well-documented failure mode. Previous studies estimate that 30% to 69% of LLM-generated references in the biomedical field are fabricated. These references are often correctly formatted, attributed to real researchers, and bear plausible publication dates, making them difficult to detect through conventional peer review.

Middleton argues that this degradation has self-reinforcing characteristics.

He further lists cross-industry failure cases: researcher Damien Charlotin’s real-time database has recorded over 2,200 instances of lawyers submitting fake AI case law in court, with more than 100 new cases added monthly and no sign of slowing down; all four Big Four accounting firms—KPMG, Deloitte, EY (Ernst & Young), and PwC (PricewaterhouseCoopers)—have been exposed or accused of publishing research reports containing hallucinated citations. Industry publication Consultancy stated that they have "all been caught passing off generative content as thought leadership." Specific cases include: in May 2026, EY Canada retracted a report on loyalty scheme fraud due to numerous AI-generated references; in October 2025, 40 out of 45 citations in a PwC report were determined to be fake by GPTZero; later that same year, Deloitte partially refunded the Australian government for a report filled with AI hallucinations.

What alarmed Middleton most was an account relayed by a structural engineer in London. This senior engineer, who works on major construction and restoration projects, told him that he now receives building specification documents written by ChatGPT every week, which contain incorrect load calculations and dangerous material combinations. He described the situation as "terrifying," especially given that roles like his are themselves on the front lines of automation and cost-cutting pressures. Middleton then asked: What would happen if such an engineer were no longer part of the review process for a major project?

On October 26, 2026, US semiconductor equipment manufacturer Applied Materials, Inc. (Nasdaq: AMAT) filed a Form 8-K with the U.S. Securities and Exchange Commission announcing that it has entered into an accelerated share purchase agreement with Dutch public limited company BE Semiconductor Industries N.V. (Besi). Upon completion of the delivery of shares, Applied Materials' ownership stake in Besi will increase from its current level to approximately 20%.

The equity increase aims to solidify a long-term strategic partnership in advanced packaging. Applied Materials stated that as hybrid bonding technology and next-generation interconnect architectures become increasingly critical enablers of energy-efficient AI compute performance, this investment holds strategic significance. The two companies have collaborated since 2020, and Besi recently joined Applied Materials' EPIC Center as an Innovation Partner to co-develop new interconnect architectures and 3D IC integration platforms supporting the AI-driven scaling roadmap.

Notably, Applied Materials emphasized that this is a long-term investment, stating it currently has no intention to increase its stake beyond approximately 20% and does not intend to seek board representation at Besi. However, the delivery of shares remains subject to the expiration or termination of the waiting period under the Hart-Scott-Rodino Antitrust Improvements Act, leaving final completion contingent on regulatory clearance.

Apple released iOS 27.2 on October 26, 2026, marking the first major update for the current operating system. The headline feature is an enhancement to Siri AI, allowing it to better recall details from previous conversations.

In this update, Siri AI can tap into more data sources to deliver personalized information, including voicemails, Safari reading lists and history, photos in text messages, and people invited to calendar events. Users can also choose which apps Siri and the iOS Search spotlight can access. This shifts Siri from a single-turn Q&A assistant to one with persistent contextual memory, capable of picking up topics from past chats in new sessions.

Additionally, Apple has expanded the Siri AI beta to include French, Japanese, Korean, Portuguese, and Spanish. Previously, the feature was available only in English in select countries.

Beyond AI, iOS 27.2 introduces dual camera support for FaceTime, allowing users to use both front and rear cameras simultaneously during video calls. For deaf or hard-of-hearing users, third-party sign language interpreters or live captioners can now be added to video calls.

Notably, the redesigned Health app, originally expected in this cycle, was not included and is anticipated to arrive later this year with iOS 27.3. iPads, Macs, Apple Watches, and other devices also received corresponding 27.2 updates.